BlueHost server with several WordPress website - Malware Cleanup

My BlueHost server hosts about ten WordPress sites and the entire account has been taken offline after a malware attack. I rolled everything back to last month’s backup, but the malicious code was already there, so a restore isn’t enough—I need every trace of the infection removed and the sites safely back online. You’ll get full cPanel (and SSH if required) so you can dig through core files, themes, plugins, databases, and the server file system. Once the malware is gone, I also want each WordPress installation updated, hardened, and scanned again so Google Safe Browsing, Sucuri, and any BlueHost tools report a clean bill of health. Deliverables: • All sites loading normally over HTTPS, with no redirects or injected code • Clean scan results from Wordfence/Sucuri and BlueHost security tools • Core, themes, and plugins fully updated, file permissions corrected, salts and passwords reset • A short report explaining the entry point, what was cleaned, and best-practice steps I should follow to prevent a repeat Please include your estimated turnaround time and any similar multi-site WordPress cleanups you have completed. I’m ready to grant access as soon as we agree so we can get the sites live again quickly.

Project ID: 40531741